Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d3332203d3e20323634323131.roa
File:                     323830343a323434343a3a2f33322d3332203d3e20323634323131.roa (raw, json)
Hash identifier:          UkufF+Abtyp+83JA349VJYU6hJRgk9K1CHJAaiJ6Ozs=
Subject key identifier:   AC:C5:24:1E:AC:54:55:FE:15:AE:35:25:67:C6:75:31:03:ED:68:9A
Certificate issuer:       /CN=916B2689E54D248C6020BC30FDA122F25B14FE87
Certificate serial:       154B0B3504A7D63A01228DC6679850F268E99F51
Authority key identifier: 91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d3332203d3e20323634323131.roa
Signing time:             Sun 08 Sep 2024 17:07:58 +0000
ROA not before:           Sun 08 Sep 2024 17:02:58 +0000
ROA not after:            Sun 07 Sep 2025 17:07:58 +0000
asID:                     264211
IP address blocks:        2804:2444::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl
                          rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4b:0b:35:04:a7:d6:3a:01:22:8d:c6:67:98:50:f2:68:e9:9f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Validity
            Not Before: Sep  8 17:02:58 2024 GMT
            Not After : Sep  7 17:07:58 2025 GMT
        Subject: CN=ACC5241EAC5455FE15AE352567C6753103ED689A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:6c:bd:dd:eb:6c:63:a6:7d:e6:b6:64:a5:
                    81:03:da:89:48:fd:9e:52:07:e1:e1:ff:01:34:25:
                    f7:8a:e7:d6:8d:ec:b9:d9:3b:e0:0a:85:89:f5:f9:
                    59:e5:2e:6f:0d:83:01:8d:51:48:42:96:2f:38:b3:
                    37:3a:e8:8c:62:20:23:8b:b9:f4:c9:0a:b8:1d:05:
                    81:08:c7:d5:e3:0b:a0:3a:a1:ea:c8:59:06:96:20:
                    17:0b:ed:60:5b:db:5a:f3:02:08:5d:15:ce:a5:30:
                    f7:60:28:25:80:1d:a4:db:8c:fd:d2:78:05:35:a1:
                    b5:2a:72:75:95:1e:cd:53:c2:e6:6f:19:7e:56:4d:
                    84:2a:ca:8c:bc:30:a3:48:ce:c8:55:fa:ef:08:c5:
                    63:f3:4d:0a:b0:a8:d3:ad:cd:81:e3:47:1b:54:77:
                    17:0b:ab:b5:9c:fa:c2:4a:00:4c:5a:ce:c7:d9:e7:
                    95:01:ca:1a:c5:52:d6:d5:04:a9:ed:5b:62:60:e1:
                    77:1d:e7:fc:59:09:0a:17:b6:73:39:d9:09:9a:5e:
                    94:48:36:cb:12:3b:ff:43:8a:8b:9e:f0:de:a6:6f:
                    22:64:e5:ed:d9:94:fb:89:cc:5c:51:5f:85:88:f7:
                    10:b3:df:55:9a:75:fe:91:be:87:32:b5:8a:df:6d:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C5:24:1E:AC:54:55:FE:15:AE:35:25:67:C6:75:31:03:ED:68:9A
            X509v3 Authority Key Identifier:
                keyid:91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/323830343a323434343a3a2f33322d3332203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2444::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:5c:44:da:4a:7d:76:f6:b7:92:51:3b:1e:f8:f5:d7:0f:2c:
         1f:94:92:b2:bf:3e:b1:7f:38:0a:95:7a:e3:8d:c2:b2:b7:7b:
         06:89:34:5f:9c:29:42:09:4d:92:46:8f:29:26:b8:ac:31:73:
         21:f8:b6:aa:98:80:d3:12:4e:cd:3e:d7:1c:17:59:2e:eb:b8:
         17:6e:8d:83:24:63:d6:51:9d:67:59:22:f7:f0:ab:9d:d8:28:
         8d:df:d2:19:02:8e:63:1a:f0:36:2b:7b:5f:bf:f1:7b:e7:b0:
         bf:7c:54:3b:68:b8:fd:53:a0:da:9a:50:57:f2:b9:76:66:e4:
         b6:3d:18:ca:7e:ac:b9:fc:84:2c:5d:74:a6:09:2d:be:9d:aa:
         f0:87:cf:23:db:b7:ed:02:bc:6f:57:c5:26:95:2c:af:01:0f:
         46:59:22:7e:c8:b2:bf:d4:04:b8:5f:e8:82:5c:a8:90:9c:82:
         6b:2e:bd:33:bb:3e:ad:38:05:cc:b1:b8:06:06:11:43:c6:31:
         e9:cf:eb:06:10:34:2e:8f:1d:e8:4b:87:92:f8:c7:cf:3f:47:
         84:d5:60:8c:64:63:be:16:99:5d:e3:a1:01:ef:2d:f4:4b:1b:
         c8:f5:29:ad:2b:12:e2:f2:c2:cd:67:55:5b:35:b7:a3:32:1f:
         c2:08:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org